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ABSTRACT 


The study of fake real quadratic orders is fascinating as their class group structure is 
similiar to real quadratic fields. Statistical data strongly agree with the heuristics of 
Cohen and Lenstra of real quadratics with class number one. We will investigate why 
this holds true as well as explore other analogues to open conjecture on real quadratic 
fields, such as the Ankeny-Artin-Chowla Conjecture, and present various results that 
mark the similiarities between real quadratic fields and fake real quadratic orders. 
Fake real quadratics are defined by inverting an ideal above any prime p which is 


split in Ox where K = Q(VD) is an imaginary quadratic field. 
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CHAPTER 1 


INTRODUCTION TO FAKE REAL QUADRATIC ORDERS 


The study of quadratic fields over the centuries produced extensive results as it is the 
most basic of number fields over the rationals. These results are numerous, while cubic 
fields and number fields with higher degrees lagged in progress as they present their 
own challenges. However natural and tangible quadratic fields appear to be, there is 
still quite a lot that is unknown. For example, it is expected there are infinitely many 
real quadratic fields with class number 1. Although numerical data strongly suggests 
this should be true, there has been little to no progress on establishing this result. The 
Ankeny-Artin-Chowla conjecture is another open result regarding the fundamental 
unit of real quadratic fields. It states the fundamental unit of a real quadratic field 
of the form (a + bVD)/2 is given, then D { b. Extensive data have been generated 
in attempts to provide convincing data or discover a counterexample. Despite the 
fact no counterexamples have been found, it is believed by many that the conjecture 
is false due to the “log log” argument which will be discussed further in Section 5.1. 
In other words, we still have not searched far enough to find a counterexample. On 
the other hand, similar results for imaginary quadratic fields have been proven since 
they are slightly better understood. For example, it has been shown there are finitely 
many imaginary quadratic fields with class number 1. 

Henri Cohen suggested by inverting an ideal above any prime p which is split in 
Ox, where Ox is the ring of integers for an imaginary quadratic field, it is a Dedekind 
domain (which we will prove in the next section), thus allowing us to study its class 


group structure. We will call this algebraic structure a fake real quadratic order. 


Cohen observed the class group structure of fake real quadratic orders have a similar 
structure to class groups of real quadratic fields. We investigate further the properties 
of the class group, the unit group, their asymptotics, and analogues to open questions 
of real quadratic fields. We will demonstrate these fake real quadratic orders have 


many similiarities to real quadratic fields, many of them evident while some less so. 


1.1 CONSTRUCTION OF FAKE REAL QUADRATIC ORDERS 


Fix a prime number p. We take any fundamental discriminant D < 0 such that D 
is a quadratic residue modulo p. Let K = Q(VD) and let Ox denote its ring of 
integers. Since (2) = 1, we have that (p) = pp. We call the ring Ox[p~'] a fake 
real quadratic order, and let Ox, be the shorthand for it. The elements of Ox» 
are elements y € Q(VD) such that v,(7) > 0 for all prime ideals q of Ox, for q # p. 

We note that the Galois conjugation induces a natural canonical isomorphism 
between Ox[p~!] and Ox|p-']. Therefore, we are able to simply write Ox». Now, 
Ox.» is a ring, but more specifically, it is a Ox-algebra. We will now show that Ox, 


is a Dedekind domain, where Henri Cohen laid out a detailed sketch of the proof and 


the author filled in the details. 
Proposition 1.1. (Cohen) The ring Ox,» is a Dedekind domain. 


Proof. We can write Ox» = U p *. Therefore, if y € p-*, then there is a x such 
that xp’ C Ox, where v,(x) $0 for all prime ideals q 4 p of Ox. On the other hand, 
if vg(x) > 0 for all prime ideals q 4 p, then we are able to write that rOx = p™-a 
for some m € Z and some integral ideal a of Ox, where a is coprime to p. Then we 


have that x € p™. Another way to stating this is pOx,, = Ox.p. 


Now, consider the following map: 


p:Oxn > Oxy 


at> AO K », 


where a is from the set of integral ideals of Ox coprime to p mapping to the set of 
integral ideals of Ox,,. We claim that this map is well-defined and is a bijection. We 


can see clearly that aOx.y is an ideal of Ox». Now, if aAOx, = bOx», then 
ap" C bOK,». 
Thus, 
ac bpOK.y — bOK y, 


which gives us vg(6) < v,(a) for all prime ideals q 4 p. By a symmetric argument, 
we get that vg(a) < v,(6) for all prime ideals q 4 p. Therefore, a = 6, since both a 
and 6 are coprime to p, showing us that y is injective. 

Now, let J be an ideal of Ox. Define a = IM Ox, which is an ideal of Ox. 
Trivally, we have that 


AO Kk » Cc IO» MN Oxp =I, 


On the other hand, if x € J, there is a k > 0 such that x € p-*, which means 


xp’ C Ox, and zp* CI, since x € I. Therefore, 
ce ap” CaOzy, 
giving us that J = aOx,. So, if a= pa’, where a’ is coprime to p, then 
AK» = a Ox yp. 


This gives us that y is surjective, thus proving our claim. Since this is a bijection, the 
generators of aOx,, are the same as a, thus all ideals of aOx.y are finitely generated. 


Next, we will show every nonprime ideal is maximal. We claim the mapping 
AO K » a) Ox =a 


is a bijection, where a is an ideal of Ox that is coprime to p. It is clear that this map 
is injective since 


AO K » a) Ox = a, 


by the above argument. 

To see surjectivity, consider x € Oxy. If x € Ox, then it is the image of itself. If 
x ¢ Ox, then we choose the smallest k > 0 such that rp* C Ox. Since a is coprime 
to p*, then there exists a € a and u € p* such that a+u = 1, so that x = ax + uz, 
where ax € aOx, and ux € Ox. Therefore, x is the image of uz modulo aOx p. 

From this isomorphism, we see that aOx, is a prime ideal if and only if ais a 
prime ideal different from p of Ox. Similarly, we can say that aOx, is a maximal 
ideal if and only if a is a maximal ideal of Ox, again not being p. This means that 
the prime ideals of Ox are either 0 or qOx» for all prime ideals q 4 p of Ox. Thus, 
every nonzero prime ideal is maximal. 

Finally, we need to show that Ox, is integrally closed. Consider the following 


monic polynomial of degree n 
P(X) =X" + Gn 1X” * +... +a,X + a9, 


where a; € Ox», and there is a x € K such that P(x) = 0. If q # p is a prime ideal 
of Ox, then 

vq(a;- 2") > i-u,(z), 
and 

Ug(z") = n+ Vq(x). 

So, if vg(z) < 0, then 

Uq(aj- x") > n+ 0, (2), 
which means that the q-valuation for the lead coefficient will not be able to cancel 
for the rest of the coefficients giving us P(a) #0. This is a contradiction. 


Therefore, it must be v,(x) > 0, giving us x € Oxy, which shows Ox» is integrally 


closed. Since all the conditions have been satisifed, this shows that Ox, is a Dedekind 


domain. 


1.2. THE UNIT AND CLASS GROUPS OF FAKE REAL QUADRATICS 


Since Ox, is a Dedekind domain, we can study its unit and class groups. In this 
section, we build up the structure of both the unit and class group and explicity define 
what elements in these respective groups look like. All the results in this sections are 
attributed to Henri Cohen. Note that this establishes an analogy with unit and class 


groups of real quadratic fields. 


Proposition 1.2. (Cohen) Let Ux, denote the unit group of Ox». Then Un, = 
Lk X €”, where juz ts the group of roots of unity in K, and the fundamental unit € is 
the generator of the principal ideal p°), where o(p) is the order of the ideal p in the 


ideal class group Clr. 


Proof. We have that y € Ux, if and only if ug(y) > 0 and v,(1/y) > 0 for all prime 
ideals q ¢ p. Therefore, y € Ux, if and only if vq(y) = 0 for all q # p. In order for 
Uq(7) = 0, it must be that yYOxn = p* for some k € Z. By the definition of o(p), the 
order of the ideal p in the ideal class group Clx, this is only possible if and only if 
o(p)|k. 

This means that yYOx = (€Ox)*/°®). In other words, y = ne*/°), for 7 being 
some unit in Ox. Since the only group of units in Ox is ~K, the roots of unity, since 


k is an imaginary quadratic field, we get the statement that y € Ux.,, if and only if 


y = ne*/o). Therefore, Ux.» = x x €”. 


Next, we explore what the ideal class group of Ox,, looks like and define the class 


number. 


Proposition 1.3. (Cohen) The class group Clk» of Ox,» is canonicallly isomorphic 
to Cle /(p), where Clx is the ideal class group of K and (p) is the cyclic group 
generated by the ideal p. Thus, hk» =|Clxp| = hk/o(p). 


Proof. Consider the map 


yp: Clr —> Clee 


[a] > [aOxy), 


where [a] is an ideal class in Clx and [aOx.,] is an ideal class of Clg. This map is a 
well-defined group homomorphism. We have from the proof of Proposition 1.1 that 
ideals of Ox» have the form aOx », it is clear to see that this map is surjective. 

We have already seen that the map a +> aQx,, is an injective map for all ideals 
coprime to p. Thus, if (Ox, = xOx,, for some x € Ox. Thea = xp* for some k € Z. 
This means that the kernel of the map vy is the cyclic group generated by the ideal a 


that minimizes k. Thus, by the Fundamental Isomorphism Theorem, 


OK/(p) = OKp- (1.1) 


The fact that hx» = hx/o(p) follows immediately from this isomorphism. 


We would like a specific representation of elements inside of Ox». The following 
lemma gives us representations of these elements. For simplicity, we will assume that 
p # 2 from here on. Since (2) = 1, there exists a € Z such that D = a? (mod p). 
Fixing one of the two possible values of a modulo p is equivalent to choosing between 


p and p. Therefore, without loss of generality we will let 
p=pZ+(a+vD)Z. 


Lemma 1.4. (Cohen) Leta =x+yVD € Ox, with x,y € (4)Z and ged(x, y,p) = 1. 


Then fork > 0, we have that a € p* if and only if p*|a? —D-y? and x = ay (mod p). 


Proof. To see sufficiency, let a € p*. Then N(p)*|N(a). Since a = x+yVD, we have 
N(a) =2*— D-y?. Therefore, 


pr |x? —D.-y’. 


If k > 0, then a € p, so 
a = put+(a+VD)v 
= (putav)+u- VD. 
So, x = pu+av and y = v. Thus, 
x=av+pu=av=ay (mod p). 


Thus, x = ay (mod p). 
For necessity, assume that p*|z? — D- y? and x = ay (mod p). Since k > 0 so 


p|N(a). Then either a € p ora € pf. But if 
a€p=pZt+(a—-VvD)Z, 


then 


a =put(a—VvD)v, 


for u,v € Z. This gives us x = pu+ av and y = —v. So 
x= putav=av=-—ay (mod p). 


Therefore 2x = D (mod p). Since we assume that p # 2, this gives us p|xz. Now, 
using the fact that (2) = 1 and p|(x? — Dy’) implies that ply, but this contradicts 
our assumption the gced(z, y, p) = 1. 


Therefore, a € p and u;(a) = 0, so u,(N(a)) = v,(a) giving us the fact that 


aep*. 


This implies the following corollary regarding the representation of elements in 


Ox p- 


Corollary 1.5. (Cohen) The elements of Ox» can be written in a unique way. Specif- 


ically if y € Ox», then 
2D 
a 


’ 


where k € Z, x,y € ($)Z, ged(x,y,p) =1, and either k <0 (i.e. y€ Ox) ork > 0, 


which must mean that p*|x? — D+ y? and x = —ay (mod p). 


Proof. Since p*y C Ox for some k € Z, we have that p*y € Ox. Therefore, 


a OD) 
pe 
Since we can always divide out the largest power of p from gcd(z, y), we can further 
assume that gced(z,y,p) = 1. Therefore, this representation will be unique. 
On the other hand, if k < 0, then y € Ox C Ox», so there are no other conditions. 


If k > 0, then using the condition that y € Ox», this is equivalent to 


By Lemma 1.4 applied to f, this statement is equivalent to p*|xz? —_D-y? and x = —ay 


(mod p). 


We see here that the unit and class groups of Ox, in this situation is analogous to 
the real quadratic field case. With this construction, we see that fake real quadratic 
orders have unit groups of rank one. Also, with the class group having parallels with 
real quadratics, we seek to find an asymptotic formula involving the class number as 
the discriminant varies. Therefore, it would be interesting to test out open conjec- 
tures that exist regarding real quadratics in this setting. We will discuss two open 


conjectures and their analogues to fake real quadratics in Section 4 and 5. 


1.3 CHEBOTAREV DENSITY THEOREM 


Before going into the class number formula and giving some asymptotics, we need to 
discuss the Chebotarev Density Theorem. The Chebotarev density theorem describes 
the statistical behavior of splitting of primes in a given Galois extension K of Q of 
rational numbers. Let K be a quadratic field, and Clg be the class group of kK. Let 
HT be the Hilbert class field of the quadratic field AK’, which is the maximal unramified 
abelian extension of K. Let ny = [H : Q]. By Class Field Theory, Gal(H/K) ~ Clx. 
Let C be an element of Gal(H/K). Let mc count the number of primes in Q that 
split in A such that Nxg(p) < X and p is represented by the element C' in the class 


group Clr. 
™c(X) = #{p: p prime, p is represented by C’, and Nx/g(p) < X}. 


The Chebotarev density theorem asserts that 


1 1 


The = aD) 


™(X) 
where Li(X) is the familiar logarithmic integral 


X dt xX 
Li(X = Ae as aes. 
ics 2 logt log xX i sa 


In 1977, Lagarias and Odlyzko [17] gave two versions of the Chebotarev density 
theorem, both having effective and computable error bounds with respect to X, h(D), 


D, and 1/| Cl |. The unconditional bound is given by the following theorem. 


Theorem 1.6. (Lagarias, Odlyzko) There are effective computable constants c, and 
Co such that if 


x > exp(10 - h(D) log?(|D})), 
then 


1 
X)) 6 Lie aX sexp(—6-h( BD)? (log X)*? 
) = | Cl(D)| i( )+ey exp( C2 h( ) (log ) i 


(1.2) 


where 39 is a Siegel zero. Note that if h(D) =1, there is no zero in this range. 


In order to make sure that Theorem 1.6 has an error term that only depends on 
X, h(D), D, and 1/|Clx |, we need a uniform bound for 69. We give the following 


theorem for completeness of the unconditional effective bound. 


Theorem 1.7. (Lagarias, Odlyzko) Let the notation be the same as the previous 
theorem. If the Hilbert class field H of the number field K is normal over Q, then 


my = 4. Let my = 16 if there is a sequence of fields 
Q=KypG ig Gun Che hh. 


which each field being normal over the preceding one. Otherwise, let my = 4-h(D)!. 


Then there is a computable and effective constant cz such that 
By < max{1 — (my - log |D|)~*, 1 — (es - |D|M")"). 


Therefore, we have an unconditional, effective error bound to the Chebotarev 
density theorem. We also have a version of Chebotarev density theorem that assumes 


GRH. 


Theorem 1.8. (Lagarias, Odlyzko) Assuming the Generalized Riemann Hypothesis 
holds true, there is an effective, computable positive absolute constant cq such that for 


every © > 2, 


1 . 1 


As the study of fake real quadratic orders require the parameters p and D, the 
distribution of primes is important. Thus the above two formulas are significant in 


our studies as we desire to study the behavior of the class number as p varies with 


1D) 
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1.4 CLAss NUMBER FORMULA 


One of the common themes in number theory is special values of L-functions encode 
arithmetic information. The Dirichlet class number formula is a famous example of 
using L-functions to compute the class number of a number field. For imaginary 


quadratic fields, this is 


De ME UX) (1.4) 


where w denote the automorphs of binary quadratic forms of discriminant D or the 


number of units in Q(VD). Specifically, 


2 D<-4 
a i eee (1.5) 
6 D=-3 


For real quadratic fields, the Dirichlet class number formula is 


VD : LA; XD) 


METS loge 


r) (1.6) 


where ¢ is the fundamental unit for Q(VD). 

In this section, we will prove the analogue to the Dirichlet class number formula 
for fake real quadratic orders. This will allow us to investigate asymptotics of class 
numbers for fake real quadratics and compare similarities to real quadratic fields. In 
this section, we will denote Ox» as Op», where K = Q(VD). This will allow us to 


define asymptotics in relation to D. 


Theorem 1.9. (O.) The class number formula for fake real quadratic orders Op, ts 


h(D,p) = an VPI Lt oe) 


Qn: log, N(epp) : 


given by 


where w is the same as defined in (4.3) and Ep,» is the fundamental unit of O7 ,. 


11 


Proof. The class number formula for imaginary quadratic fields is given by 


w+ 4/|D|- £1, xp) 
Qn : 


h(D) = 


By Proposition 1.3, we know that the class group is canonically isomorphic to Clp /(p) 
and h(D,p) = h(D)/o(p). Therefore, 


h(D) _w-y|D|-EC,xp) 1 


MDP) = Oe) ~ Dn o(p) 


We use the classical technique of multiplying by 1, which in this case we will multiply 


by 1282 which gives us 


log p 
wV|D|-LO,xv) 1 logp w-yI|D|-LU,xp)  logp 


o(p) logp — “log pe) 


Since €p,», the fundamental unit of Op», is a generator for the principal ideal p°) 
we know log, pl) = N(ep»). Therefore, 


w+ s/|D] - L( (1,xp)-logp _ we /|DI- L( (1, xp) 


2n - log N(Epp) On. log, N(Ep») 


This gives us the desired class number formula for fake real quadratics. 


We would like to investigate some asymptotics on h(D,p). We need the following 


lemma, before we get to our theorem. 


Lemma 1.10. Let D < 0 be a fundamental discriminant. Let Cl(D) denote the class 
group of Q(VD). Then 


1 . h(D) + 1 
ord(C’) — 2 


CeE[Cl(D)] 


where ord(C) is the order of class C in the ideal class group Cl(D). 


Proof. There are only finitely many class groups of order 1 for negative fundamental 
discriminants. Therefore, the worst possible situation is the ideal class group is 


isomorphic to the product of cyclic groups of order 2. In other words, all elements 


12 


have order 2 except the identity. Therefore, given a fundamental discriminant of an 
imaginary quadratic field, if the class group is isomorphic to the product of cyclic 
groups of order 2, then the number of elements of order 2 is h(D) — 1. Therefore, the 


sum of —4 5 over all elements of order 2 is 


ord(C 


(h(D) — 1): 


Nl] rR 


By accounting for the identity element, we have that the upper bound over all ele- 


ments in Cl(D) is 


It is possible to improve this bound given here by looking at the bound on 2-torsion 
elements from Cox on Gauss genus theory [9] and bound on 3-torsion elements from 


Ellenberg and Venkatesh’s Reflection Principles [12]. 


Theorem 1.11. (O.) Let 


2 xX Re 

y S- D,p) < LAY) -( Le ce | o( ie 

—X<D<0  (p)=pp 21¢(3) log Y 
Nxjg(p)<Y 

where the first summation ranges over all —X < D < 0 fundamental discriminants 


such that (2) = 1 and second summation is over all primes that split in K over Q 


such that Nxjo(p) < Y, where both X and Y are large. 


Proof. Since h(D,p) = h(D)/o(p) = h(D)/ ordey(P); 


~~ ADy)= YS AD) YD 
-X<D<0_ (p)=pp -X<D<0 wep OUP) 
Nx/o(p)<Y Nxjo(p)<Y 


1 
Sn SP eee at 
-~X<D<0 Ce[C(D)] ordeipy(C) Nxjo(p)<Y 
p rep by C 
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By the Chebotarev Density Theorem, we know the primes that split in K are evenly 
represented in the class group. More specifically, 
So 1~—~ -Li(Y). 
Nxjg(p)<Y 
prep by C 
Therefore, using this fact and Lemma 1.10, we get 
1 
ye UD), De sae LY) Sa 
=Ke2D<0 Ce[Cl(D)} h(D) 
This simplifies to 


Li(Y) 
— 


Li(Y) 
— 


1. 
—X<D<0 


> ACD) + 


~X<D<0 
The average value for the class number for imaginary quadratic fields, given by 
Chamizo and Ubis [5], is 


4 2 
SP Dae ae 
—~X<D<0 21¢(3) e 


Furthermore, the number of negative fundamental discriminants, given by Bhargava 
and Pomerance [21], is 


3X 
ss + Ox), 


Using the above two bounds, we get 


LY) os np) + BOD. 4 
Lily) An sin 2 LY) (3x | 1/2 
+ (ey? - 3x] be (5 F(x") ) 


hore 2 ah OO, el REY 
=u(y): (ax? - 2) 0 log Y ) 
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CHAPTER 2 
FUNDAMENTAL UNIT FOR FAKE REAL QUADRATIC 


ORDERS 


The fundamental unit is a generator modulo the roots of unity for the unit group of 
the ring of integers of a number field. For real quadratic fields Q(VD) where D is a 


fundamental discriminant, then the fundamental unit is 


-atbvD 
a 


where the pair (a,b) is the smallest solution to the Pell equation 
x? — Dy? = +4. 


The classical method to compute the fundamental unit for real quadratic fields in- 
volves the computation of the continued fractions expansion for VD. For fake real 
quadratic orders, there is no analogous method has yet to be found. Therefore, in the 
subsequent sections, we will discuss two methods to compute the fundamental unit 
for fake real quadratic orders. The algorithms are implemented in SAGE [24] and the 


code in their entirety can be found in the Appendices. 


2.1 METHOD 1: BRUTE FORCE 


The first method to compute the fundamental unit requires the knowledge of the 
class number h(D) for the given imaginary quadratic field and pre-computation of 
the factors of the class number h(D) = h = JJ") p;’, where k is the number of distinct 


prime divisors. 
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Algorithm 2.1. Inputs: p prime, D < 0 fundamental discriminant, (2) =, 
Output: Ex», fundmental unit for Ox», where K = Q(VD). 
Assume: h(D) = h, the class number for K has been pre-computed, and the factor- 


ization h = []i2) p;' has been found. 
1. Factor (p) = pp. 


2. List all the possible divisors in ascending order of h. Let L = fae where d; 


is a divisor of h. 
3. Compute p%, starting with i = 0 


4. If p% is principal, then d; is the order of p. Return p% as the fundamental unit. 


If it is not principal, theni =i+1, and return to Step 3. 


Since we assume for this algorithm the value h(D) has been computed and fac- 
tored already, this algorithm has low complexity. In practice, the computing of the 
class number and factoring it is non-trivial and is a different computational problem. 
Hence, this algorithm is only practical when h(D) is small or when |D| is small. We 
note that this method is not the most efficient method to compute the order for p. 
It would be quicker to look at L = {h/p*}¢_, to get the order. If the class number is 


unknown, the method discussed in the following section may be a better alternative. 


2.2. METHOD 2: BINARY QUADRATIC FORMS 


The following method employs the use of binary quadratic forms. We start with a 
brief summary of binary quadratic forms before discussing the algorithm, but the 
author recommends Buell’s Binary Quadratic Forms: Classical Theory and Modern 
Computations [4] for further reading on this topic. Let Q(z,y) = Az? + Bry + Cy? 
be a binary quadratic form with discriminant D = B? —4AC. We use the shorthand 


Q = (A, B,C) for the binary quadratic form Q(x, y) = Ax? + Bry+Cy’. A principal 
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ideal has a binary quadratic form that is SL2(Z) equivalent to a principal binary 


quadratic form. 


Definition 2.2. Let D be a discriminant. Then the principal binary quadratic form 


of discriminant D is 


D 
(2.1) 
D 


a 6 
Let M = € SL2(Z), where ad — By = +1. Let Q = (A, B,C) be a binary 


Ao: 
quadratic form with discriminant D. We say M acts on Q on the right by 


QoM =Q(aX + BY, yX +6Y). 


Another way to state is letting Q be represented by the matrix 


2 : 


vit ob 
ise 


Then the matrix M acts on Q by M~'QM = S, where S is an imaginary binary 
quadratic form with discriminant D. We say Q and Q’ are equivalent forms when 
there is M € SL2(Z) with Qo M = Q’. 

Before we outline the steps to compute the fundamental unit, we define powering 
up a binary quadratic form as repeatedly using Gauss’s composition on a form Q, 


which is well-defined up to equivalence. For example, we say Q powered up 3 times 


as Q® = QoQoQ. 


Algorithm 2.3. Inputs: p prime, D fundamental discriminant. 


Output: ex», fundmental unit for Ox», where K = Q(VD). 


1. Compute (2). If (2) #1, then stop. Otherwise, continue to Step 2. 


Le 


. Since (2) = 1, then there exists a binary quadratic form Q = (p,b,c) such that 


b? — 4pc = D. [9] In order to find this form, we first compute the b coefficient, 


which is the solution x? = D (mod 4) such that 


. Starting with i = 1, compute QQ. 


. Check if Q* is equivalent to the principal form of discriminant D. If not, then 
i =i+1 and return to Step 3. If Q' is principal, then let m =i and go to the 


next step. 


. Let Q™ = (p™,b',c) which has been verified in Step 4, is equivalent to the 


principal form P = (a,b,c). Compute the solution (x,y) such that 


Ax? + Bry + Cy? = p™. 


. Complete the square to retrieve the fundamental unit. In other words, 


(x + yVD)(x — yVD) = p™. 


This algorithm could be made more efficient during Steps 3 and 4. Rather than 


powering up with increments of a single power in each step, we can employ Shanks’ 


baby-step-giant-step approach [22] to reduce the number of multiplications. Since 


the reduced binary quadratic forms of a given negative discriminant form a group, 


Shanks’ baby-step-giant-step approach uses a meet-in-the-middle method to find the 


principal form. The time-memory trade-off can be performed with O(,/n) group 


multiplications rather than the brute force’s O(n) group multiplications, where n is 


the size of the group. The complexity of the algorithm is discussed in further depth 


in the following section. 
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2.3. ALGORITHM COMPLEXITY 


Algorithm complexity quantifies the amount of time it takes for an algorithm to run 
as a function of the input. The time complexity is given in big O notation, which 
mean the complexity is described asymptotically, i.e. as the input size goes to infinity. 
For example, an algorithm runs on linear time has O(n) where n is the input, and 
O(2") is called exponential time. An algorithm is said to be polynomial time if 
the running time has an upper bound with a polynomial expression, i.e. O(n"). We 
note that the Euclidean algorithm for computing the greatest common divisor of 
two integers runs in polynomial time. This is polynomial with respect to the binary 
representation of integer n and m. The inputs n and m have binary representation 
of roughly logn +logm. The Euclidean algorithm runs in O((logn + log m)?), which 
is polynomial with respect to logn + log m. 

We will discuss the algorithm complexity of recovering the fundamental unit 
through the use of binary quadratic forms. To see the SAGE program, see Appendix 
A. Let D < 0 be a fundamental discriminant and p be a given fixed prime. The 
first step is to verify (2) = 1, which is equivalent to the complexity of the Euclidean 
algorithm. 

The next step is to find the binary quadratic form of discriminant D such that 
a = p, or in other words, Q = (p,b,c) where b? — 4pc = D. This step is costliest since 


it requires calculating a modular square root, or in other words find b such that 
b> =D (mod p). (2.2) 


The complexity of finding such a modular square root is discussed in Section 2.4. In 

section 2.4, we will explain that by assuming GRH, we will have polynomial time. 
In step 3, we power up Q by repeatedly using Gauss’s composition law. The 

complexity for composing two forms is equivalent to using the Euclidean algorithm 


twice. It costs one Euclidean for getting the form, while it costs another Euclidean for 
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reducing the form and checking to see if the power is principal. Therefore, this step 
can be done in polynomial time with respect to |D|. We would like to iterate the use 
of Shanks’ little-step-giant-step algorithm can reduce the number of multiplications 
necessary to reach the principal form by generating the powers of binary quadratic 
form Q in a more efficient, organized manner. 

Assume that the order of the binary quadratic form Q in the ideal class group Cly 
is k. Then after step 3, we have the binary quadratic form Q* = (p*, B,C) which 
reduces to the principal form (A’, B’,C’). Using an extended Euclidean algorithm 
computation, we get the representation of p* by the principal form (i.e. find (2, y) 
such that A’x? + B’ry + Cy? = p*.) We complete the square and factor to recover 
the fundamental unit. 

In the worst case, our algorithm will cost us 1 expensive computation of the square 
root modulo p and 2,/|D| Euclidean algorithm computations. If we assume GRH, 
our computation of the modular square root can be done in polynomial time, giving 
us the complexity to recover the fundamental unit in polynomial time with respect 
to VP . In the following section, we will discuss the expensive calculation of the 


modular square root and show examples of how it can be used. 


2.4 COMPUTATION OF MODULAR SQUARE ROOTS 


As stated in the previous section, the most computationally intensive step of com- 
puting the fundamental unit of a fake real quadratic order is calculating a modular 


square root, or given integers n and m, find a solution for the following equation: 


z?=n (mod m). 


Since the n value is our fundamental discriminant D and m = p is prime, we are 
trying to find solutions to x? = D (mod p). One method to find such a square root 


modulo a prime is to use the Tonelli-Shanks algorithm [23]. The algorithm solves 
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the following problem: Given an odd prime p and an integer D such that (2) ee 
recover a solution to 


xz? =D _ (mod p). 


Algorithm 2.4. 


Step 1: Let M be an integer greater than or equal to 0 such that 2“||(p — 1), and let 
p= 1S Ro", 


where R= 1 (mod 2). If M = 1, then p = 3 (mod 4). Jn this case, we are able to 


compute directly the solutions to x? = D (mod p) by directly calculating 
R=+4D°*)/4 mod p. 


Step 2: In this step, we need a quadratic nonresidue element modulo p. In other 


words, we want to compute some z such that (:) =-—1. Set 


Step 3: Set 


P. 


II 
S 
ee) 

B 

ts) 
Q 
= 


UF ex ME, 
Step 4: Iterate over the following loop: 


1. If P=1 (mod p), return the value T. T is the square root of D modulo p and 


our desired solution. 
2. Otherwise, find the smallest 7 where 0 < 7 < U such that 
p? =1 (mod p). 


Note this step can be accomplished efficiently by repeated squaring and reduction 


modulo p. 


pal 


3. Let B= CC?" (mod p), and compute the following: 


T = T-B (mod p), 
P = B* (mod p), 
C = B? (mod p), 
i 


Return to Step 1. 
Once we have recovered the value T, the second solution to our modular square root 
isp—T. 
The complexity of the algorithm is 


Hope DY : 


modular multiplications where d is the number of digits in the binary representation 
of p and & is the number of ones in the binary representation of p, and M is the 
same as above, the largest nonzero exponent of 2 that divides p — 1 exactly. This 
is the average complexity of Tonelli-Shanks over all possible inputs involving both 
quadratic residues and nonresidues. 

In our algorithm, we need a quadratic nonresidue. One method is to randomly 
select a value y and check whether it is a nonresidue. This should take on average 
about 2 computations of the Legendre symbol, which costs about 2 Euclidean al- 
gorithm computations each [25]. The reason why we expect on average 2 of these 
computations to find our nonresidue is the probability that a randomly chosen y is a 


quadratic residue is 


+1 1 
noe eae 
p 2! 
which is less than 1 but greater than 5 Therefore on average, selecting 2 elements 


from {0,1,...,p — 1} should result in finding a quadratic nonresidue. By assuming 


GRH, recovering a nonresidue can be done in polynomial time [1]. 


Ze 


In conclusion, Tonelli-Shanks is a great choice for solving 7? = D (mod p) when 
M from p—1 = R-2™ is small relative to the number of digits in the binary expansion 
of p. Alternatively for large M, Cipolla’s algorithm is proven to be more efficient in 
[25] if and only if 
M(M —1)> 8M + 20. 


2.5 EXAMPLE OF TONELLI-SHANKS ALGORITHM 


We will show two separate examples illustrating the computation of the Tonelli- 
Shanks algorithm for computing a square root modulo a prime. 

Example 1 

We will solve 2? = —23 (mod 13). We satisfy the conditions to use Tonelli-Shanks 


since 13 is an odd prime and (34 = 1 since 
(3) = 7" tGnod 13). 


Step 1: 

We have M = 2 since p—1=13—1=12=3-2?,so R=3. 

Step 2: 

2) = —1. Set 


We have z = 2 is a quadratic nonresidue modulo 13 as (3 


Step 3: 

Let 
T = D®)?P = (-23)6Y2=9 (mod 13), 
P = D®=(-23)?=1 (mod 13), 
ee 

Step 4: 


Since P = 1 (mod 13), we stop our loop and return T = 9. 
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The other solution to x? = —23 (mod 13) is p— T = 13—9 = 4. This example 
does not illustrate properly the use of the loop in Step 4, so now we will attempt to 
solve x? = 10 (mod 13). 

Example 2 


This is a valid use of Tonelli-Shanks since 13 is an odd prime and (73) = 1 since 
10-9? S41. Gueda3s)y: 


Step 1: 
Since p—1=13—1=12=3-2?, our R=3 and M = 2 like from above. 
Step 2: 


We will use the same quadratic nonreside z = 2 and set 


C= 7 =? ]s (mod 13): 


T = DEM? = 108)? S=4- ‘God 13). 


v 
| 


DF =10°==1 (mod 13), 


WS M = 2, 


Since T #1 (mod 13), we take j from 0 < j < 2. We start with 7 = 1. Let 


e Let 


which means 
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e Set 


We restart the loop. Since P = 1 (mod 13), we return T = 7. The other solution is 
p-T=13-7=6. 
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CHAPTER 3 


MEAN NUMBER OF THREE TORSION ELEMENTS 


In this chapter, we explore the number of three torsion elements in the class group 


of fake real quadratic orders. 


Definition 3.1. Let G be a finite Abelian group and let y € G. Then 74 is a 3-torsion 
element if and only if y? = 1g, where 1g is the identity element of G. Another way 


to say this is o(y)|3 (i.e. o(y) = 1 or 3), where o(7) is the order of y in the group G. 


The classical theorems of Davenport and Heilbronn [10] state the asymptotic 
formulas for the total number of 3-torsion elements in the ideal class group of the 


quadratic fields with a bounded discriminant. 


Theorem 3.2. (Davenport, Heilbronn) Let D denote the discriminant of a quadratic 
field and let Cl3(D) denote the 3-torsion subgroup of the ideal class group Cl(D) of 
Q(VD). Then 


Y [Cw(D)]| = S- YH 1+0(x); (3.1) 
S> |Ch(D)] = 2- S> 1+0(X). (3.2) 


3.1 3-TORSION ELEMENTS IN FAKE REAL QUADRATIC ORDERS 


Since we have shown that the class group of fake real quadratics share similar class 


group structures as real quadratic fields, it would be safe to assume the average 


number of 3-torsion elements in fake real quadratic class groups would be :. The 


following theorem shows this fact is true, and the fields share this same property 
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when averaged simultaneously over D and p. That is, when D and p are sufficiently 


large, the desired result occurs. 


Theorem 3.3. (O.) Let Op, denote the fake real quadratic order derived from the 
imaginary quadratic field Q(VD) and prime p where D is a quadratic residue modulo 


p. Let Cl3(D, p) be the 3-torsion subgroup of the ideal class group Clp,» of Op». Then 


4 1 3X 
ye S- (ClyC2)) |= 475 WY) error, (3.3) 
~X<D<00<p<Y 32 wv 
(p)=pp 


where the error bound assuming GRH is 
O((XY)!? - log? K+ XY? -logY). (3.4) 
Before we prove this, the following lemma is needed. 


Lemma 3.4. Let G be a finite Abelian group, and let r3(G) denote the 3-rank of 


G. Let (a) denote a cyclic subgroup generated bya € G. Then if a € G is chosen 
3r3(G) 4.9 


at random with probability 4+, then the average value of | Tor3(G/(a))| is ; 
IG 3 


where Tor(A) represents the 3-torsion subgroup of group G. 


Proof. Let r3(G) = k. By the fundamental theorem of finitely generated abelian 
groups, we have G/(1) ~ G, the group of order k. There are 3“ — 1 elements a € G 
where a # lg that will generate G/(a), which is a subgroup of 3*~!. Therefore, 
since each element of G has a a probability of being chosen, the average size of the 
3-torsion subgroup will be 


ali ages ol & Po eee 
3k 3k "3 3 


3k 


By the Davenport-Heilbronn Theorem, the mean number of 3-torsion elements for 


imaginary quadratic fields is 2. Another way to state this is 


S~ Prob(k) - 3° = 2, 
k=0 


yas 


where Prob(k) represents the probability that r3(Cl(D)) = k, and Cl(D) denotes the 
ideal class group for an imaginary quadratic field for —X < D < 0. Since Lemma 
3.4 states that the average size of the 3-torsion subgroup of a finite Abelian group 
modulo a random cyclic subgroup is sree the mean number of 3-torsion elements 


for fake real qudratic fields is 


lee) k 2 
S> Prob(k) - (° a 
k=0 3 
Since 
So Prob(k) 3" = 
k=0 
we have 


S> Prob(k) +3" -—1=1, 


which simplifies to 


9 Prob(k > Prob(k => Prob(k —1)=1, 


since the sum of all probabilities equals 1. Now dividing both sides by 3 results in 
ghee 1 
Prob(k = 
3 ro (FS ; \= Fi 


Therefore, we have 


 Prob(t) (=F) +1=S Prov(a)- (FS *) + ¥° Provia) 


(3.5) 
Now, we can prove our theorem on hand. 


Proof. By (3.5), we are able to replace | Cl3(D,p)| with :, resulting in 


4 
Me. nd laa: De, Et 
—-X<D<00<p<Y —-X<D<00<p<Y 
(p)=pP (p)=pP 
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Using the fact that half the primes in Q(VD) split and the prime number theorem, 


we get 


4 4 1 

il S- eS Sie > ly 

3 —X<D<00<p<Y 32 —X<D<0 
(p)=pp 


By counting the number of negative fundamental discrimants taken from [21], our 


main term becomes 


Assuming GRH, our error bound is 


Y'/2 . log(|D| + Y?)) 
<y (ee og D)) 


yi/2.] D 
_y ( og | |+¥1 log + tog D)) 


—X<D<0 


—X<D<0 h(D) 


log? |D 
Cee gee mS SAG) are S- 1+ Se log |D| 


-x<D<0 1/|D| -X<D<0.- —X<D<0 


ox 
=(c3-X7V?.y4/? . log? X + Y? logY + log X)- (= + On) 
Tv 


Qe (XY) op? X XY? ev 


The unconditional error bound from Chebotarev is 


1 Y 
« S ; tc, -Y -exp(—e2- h(D)~¥/? - (log Y)1? 
~X<D<0 fo logy © | : oe 


1 y 
~ SS ; Le, -Y - exp(—c2|D|74 - (log Y)¥/?) 
-~X<D<0 |D| los Y 


BY RY ons XY a 5 
ae 3¢1 = -exp(—c,.X~/4(log Y)/?) 
ney 

«<5 Y SoXY sexptx logy"): 
g 
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CHAPTER 4 


COHEN-LENSTRA HEURISTICS 


4.1 CLiass NUMBER PROBLEM 


One of the most prominent open conjectures of real quadratic fields started with the 
class number problems proposed by Gauss. In 1801, he discussed and proposed two 
conjectures in regards to imaginary quadratic fields and stated a third conjecture for 


real quadratic fields. 


Conjecture 4.1. (Gauss) Let D < 0, and let h(D) denote the class number for 


Q(VD). Then h(D) tends to co as D tends to —ov. 


This result was proven by Heilbronn [14] in 1934. This beautiful statement does 
not shed light on how many fields have a particular class number since his proof 
proved an ineffective lower bound for h(D). Gauss’s second conjecture on imaginary 


quadratic fields attempts to answer the question of how many. 


Conjecture 4.2. (Gauss) Given n, there are finitely many imaginary quadratic fields 


with class number n. 


Heilbronn and Linfoot [15], in 1934, proved that there are at most 10 imaginary 
quadratic fields with class number 1, with 9 of those fields being known at that time 
and one unknown. Through recent developements, Watkins [27], in 2004, gave a 
exhaustive list of all imaginary quadratic fields for all class numbers up to 100. 

Dealing with imaginary quadratic fields is different and is considered generally 


easier to deal with than real quadratic fields. We will go into slightly more depth on 
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why imaginary quadratic fields are easier to deal with than real quadratics in a later 


section. It is evident to see that it is true with the following open problem. 


Conjecture 4.3. (Gauss) There are infinitely many real quadratic fields with class 


number one. 


It is assumed that this conjecture is true, although there have been no great ad- 
vances in establishing its validity. It is obvious to see the difference between real 
versus imaginary quadratic fields as we know there are exactly 9 fundamental dis- 
criminants of imaginary quadratic fields with class number one. Not much progress 
has been made in regards to this conjecture. 

One of the reasons that this problem contrasts sharply is the class number formula 


of each respective type of quadratic field. 


4.2 CLASS NUMBER FORMULA FOR REAL AND IMAGINARY QUADRATIC FIELDS 


Recall the class number formula for real quadratic fields is 


pp) = VP Hxo), ae 


For imaginary quadratic fields, the class number formula is 


Ww: ID|- LO, xp 
eal x) 


h( (4.2) 
where 
2: D<«-4 
oa car | (4.3) 
6 = -3 


Inspecting the two contrasting formulas, we see that the analytic formula for class 
number for real quadratic fields has an extra factor of loge in the formula. This 
extra factor makes it harder to control. Although it is well believed that there are 


infinitely many real quadratic fields with class number one, there has been very little 


dl 


progress made on this. The heuristic argument of Cohen and Lenstra where they 
produced probabilistic arguments on which Abelian groups occur naturally is a major 
conjecture regarding real quadratic fields with class number one. These probabilities 


are weighted by the size of these automorphism groups. 


Conjecture 4.4. (Cohen, Lenstra) The proportion of real quadratic fields with prime 
discriminant D =1 (mod 4) such that h(D) =1 should exist and be equal to 
CSO Sor) sss 
k>2 
In general, the proportion of those class groups to a given Abelian group G should be 


proportional to 
pe 
|G] + | Aut(G)|’ 


where Aut(G) is the group of automorphisms of G. 


4.3. HEURISTICS FOR FAKE REAL QUADRATIC ORDERS 


Although the data strongly shows the similarity, Cohen makes a clear statement 
about the difficulty of producing an asymptotic since the data set is small, and the 
convergence to this limit is slow. The ability to differentiate between large powers 
of log versus small powers of x is quite difficult. Based on Cohen’s data from an 


unpublished manuscript, he states that the asymptotic for the secondary term could 


be 
230 
0.754458... + —z—, 
log” (x) 
but it could also be 
0.505 


0.754458... + — 
£ 


Regardless, the Cohen-Lenstra heuristics seem to hold true numerically. We give 


the following analogue for fake real quadratic orders. 
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Conjecture 4.5. Let p be a fixed prime. The proportion of primes D = 1 (mod 4) 
such that (2) = 1 of which hk» =1, where K = Q(WD) is the imaginary quadratic 
field, exists and is equal to C' = 0.754458.... 


This conjecture is a natural implication since the class group of a real quadratic 
field is isomorphic to G/(o), where G is an abelian group and o is a randomly chosen 
element from G [8]. Fake real quadratic orders have the same structure. The class 
group has structure Clx /(p), where Cl is the class group of an imaginary quadratic 
field and p is a randomly chosen element of the class group which represents an 
element of the class group. Thus, this conjecture is implied from what Cohen and 
Lenstra originally conjectured regarding quadratic fields. 

Here are the tables to the modest limit of 27° of the proportion of fake real 
quadratic orders with D = 3 (mod 4) with class number hx, = 1. The convergence 
of the fake real quadratic is consistent with the real quadratic fields the proportion 
is the far right column of both tables. 


Table 4.1 Ratio of Prime Discriminants D = 1 (mod 4) of Fake Real Quadratics 
with hk» = 1: Part 1 


2 3 5 7 11 Real 


* || 833232 | 820886 | .826853 | .827565 | .823529 | .810597 
> | 807906 | .805917 | .812256 | .803711 | .806630 | .808206 
® || 806424 | .794974 | .808407 | .794414 | .796014 | .795179 
I'v || 795764 | .794199 | .791770 | .790069 | .794188 | .793950 
18 || 789878 | .787790 | .788826 | .786843 | .784353 | .789673 
19 || 782992 | .784135 | .783784 | .782650 | .778906 | .784095 
2°9 || 780740 | .780362 | .779968 | .778748 | .776097 | .777829 
271 || 776594 | .776978 | .775072 | .772542 | .771588 | .774867 
272 || 773628 | .772959 | .772230 | .771919 | .770220 | .772734 
273 || 770983 | .771040 | .770584 | .770025 | .769845 | .770283 
2°" || 768857 | .768855 | .768615 | .768377 | .767820 | .768519 
2*° || 767230 | .766897 | .766656 | .766279 | .765958 | .766459 
276 |! 765842 | .765504 | .765098 | .764852 | .763370 | .764857 


The figure following the table places the information found in the table in a 


visually appealing graph. 
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Table 4.2 Ratio of Prime Discriminants D = 1 (mod 4) of Fake Real Quadratics 
with hx» = 1: Part 2 


13 abs 19 23 29 Real 

|| 816413 | .798417 | .818237 | .795745 | .819682 | .810597 
|| 805951 | .795912 | .794060 | .802812 | .810705 | .808206 
16 || 804747 | .796138 | .793235 | .795851 | .799757 | .795179 
Iv || 792229 | .789720 | .787567 | .791605 | .790901 | .793950 
18 || 783438 | .789030 | .782039 | .787057 | .786245 | .789673 
‘9 ll 779968 | .783448 | .779649 | .782491 | .778906 | .784095 
279 || 777067 | .778146 | .776277 | .778748 | .776097 | .777829 
271 || 773423 | .773714 | .773678 | .772542 | .771588 | .774867 
272 || 771451 | .770931 | .771173 | .769554 | .770261 | .772734 
273 || 769238 | .769426 | .768673 | .767680 | .767901 | .770283 
274 || 767576 | .767239 | .766869 | .765940 | .766849 | .768519 
2° || 765572 | .765256 | .765058 | .764624 | .764370 | .766459 
2°° || 764243 | .763984 | .764104 | .763558 | .763370 | .764857 


235 2°16 2417 2°18 2°19 
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Figure 4.1 Graph of Ratio of Prime Discriminants D = 1 (mod 4) such that 
leg = 


34 


CHAPTER 5 


ANKENY-ARTIN-CHOWLA CONJECTURE 


This section is credited to Henri Cohen. His work investigated the analogue to the 
Ankeny-Artin-Chowla conjecture for fake real quadratic orders. He computed the 
counterexamples, but the author computed the fundamental unit counterexamples 


and placed them in the Appendix. 


5.1 CONJECTURE FOR REAL QUADRATIC FIELDS 


The Ankeny-Artin-Chowla Conjecture (AAC for short) is a divisibility result involving 
the fundmental unit with the discriminant of the field. Specifically, let K = Q(V/D) 
be a real quadratic field with prime discriminant D such that D = 1 (mod 4). Then 


the fundamental unit of K has the form 


a etbvD 
a 


The AAC Conjecture asserts that D { b. As previously stated in the introduction, 
this conjecture is still an open problem, although extensive numerical data has been 
generated over the years which confirms the truth for D < X. Table 5.1 gives the 
progression of verification since its proposal in 1952, and the most recent result given 
by van der Poorten, Williams, et al., verifying the conjecture to be true for D < 2-101. 

We must mention that although there are effective and “fast” methods to compute 
the fundamental unit for real quadratic fields, the computations can be extremely 
memory intensive. For example, for discriminant D = 40,094, 470,441, the a and b 


values of the fundamental unit exceed 10°°°°° [26]. The work of van der Poorten, 
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Table 5.1 Verification of AAC Conjecture for all D< X 


xX Investigator(s) Date 
Ankeny, Artin, Chowla 

2 000 p =5 (mod 8) only 1952 

100 000 Goldberg 1954 

6 279 714 Beach, Williams, Zarnke 1971 

100 028 010 Soleng 1986 

1 000 000 000 Stephens, Williams 1988 

200 000 000 000 | van der Poorten, te Riele, Williams | 2000 


Williams, et al designed special equipment and algorithms to minimize the memory 
load in order to verify as far as they did. To most, the value of X = 2-10" might 
seem like a very large number, so it might seem convincing that this conjecture may 
be true. Despite the lack of a counterexample, there are many who believe this 
conjecture is false. The “loglog” argument is a popular explanation why the AAC 
conjecture may be false. One way to state this argument is we have nothing to show 
otherwise that b mod D behaves randomly. Thus, 


» - (5.1) 


D<xX 
D=1 (mod 4) 
D prime 


should tell us how many counterexamples we should expect for a given X value. The 
integral from (5.1) is of the order of + log log X, where the 5 accounts for the D = 1 
(mod 4) condition. So even for the “large” value X = 2-10", it is expected to 
have 1.39 counterexamples. Therefore, it is not unreasonable that there have been 


no counterexamples found even for this large of an X value. 


5.2 ANALOGUE CONJECTURE FOR FAKE REAL QUADRATIC ORDERS 


Since we believe fake real quadratic orders behave the same as real quadratic fields, it 
would be interesting to study the analogue to the AAC conjecture and see if it holds 
up the same way. Perhaps not surprisingly, there are counterexamples. The following 


counterexamples are given by Cohen [7]. The simpliest of all of them is p = 7 and 
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D = -3. For K = Q(V-3), the class number h(—3) = 1. Therefore, without loss 
of generality, p = (2+ /—3) and p = (2 — —3), where (7) = pp. The fundamental 
unit for Ogi y=3),7 is 


0+ v3(5)" 


where n € Z. Letting n = 1, the fundamental unit 


—-143/-3 


©Q(v-3),7 — 5) 


violates the AAC conjecture since clearly —3|3. Although this is a counterexample, 
one might question the validity that this is a true counterexample for the analogue 
since the group of roots of unity for this field has order 6. To avoid this being a 
complication since real quadratics have unit group of rank 1, we can take a fake real 
quadratic that has a similar structure. Consider p = 347 with discriminant D = —7. 


Then the fundamental unit for this particular fake real is 
EQ(/—7),347 = 2 + Tv —7. 


It is quite obvious that this violates the AAC conjecture, but avoid the earlier com- 
plication since the unit group for Og, y=#) 347 has rank 1. 


It appears the loglog philosophy holds true for the fake real quadratic case. As 


1 
D? 


D varies with fixed p, the probability of failure is which is expected since there 
is no reason why we believe D should not behave randomly. Cohen mentions that 
no counterexamples have been found for p = 2,3,5,11,17, and 29, although this has 
been only tested for a very small bound D < 1072000. Further analysis could be done 
for these primes, but it would not be unreasonable to speculate that perhaps these 
primes without counterexamples for very large D might inherently behave exactly as 
real quadratic fields. It would be interesting to study these and see if there is any 


substance to these unsupported claims. 


To see more counterexamples, see Appendix D. 
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CHAPTER 6 


NUMBER FIELD CRYPTOGRAPHY APPLICATION 


Public key cryptography is one of the main techniques for securing the Internet. 
Although there are many symmetric key crypto-systems that are secure, they require 
both parties to have the same key. Communicating this secure key over the Internet 
is a difficult problem, which presents an issue on using symmetric key crypto-systems. 
Most of the current public key crypto-systems, such as RSA, are based on seemingly 
difficult computational problems in number theory such as factoring integers. 

In 1988, Buchmann and Williams [2] presented a variant of the classical Diffie- 
Hellman key exchange protocol using the class groups of imaginary quadratic fields. 
Since then, there has been development in this field such as extending it to real 
quadratic fields. There are also methods now to devise cryptographic protocols using 
these fields [3]. 

In this chapter, we will give an overview of the key exchange protocol using the 
ideal class group of fake real quadratic orders. This protocol is identical to the one 
proposed by Buchmann and Williams proposed for imaginary quadratic fields with an 
exception. As stated in previous sections, fake real quadratic orders have similar class 
group structures to real quadratic fields. The algorithm discussed here gives another 
way to use Buchmann and Williams key exchange but given a restriction on how the 
ideals are chosen. This adds an additional bit of difficulty to the problem since the 
class group used has a structure similiar to real quadratic fields rather than imaginary 
quadratic ones. The security proof shows that using the correct procedure, the users 


should expect reasonable protection of the key and another attempt to a solution for 
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the key exchange problem. Therefore, we are able to accept the security proof given 
by them, but we will also discuss the limitations and the cautions regarding the use 


of this protocol with these fake reals. 


6.1 IDEALS OF IMAGINARY QUADRATIC FIELDS 


From Proposition 1.1, we saw that the map y, defined by a +> aOx,, where a is 
from the set of integral ideals of Ox mapping to ideals of Ox», is an isomorphism. 
Therefore, we can look at the properties of a as an ideal of Ox and develop the same 
properties for the ideals of Ox». 

Before we develop these properties about the ideals in Ox, we need to define some 
of the terminology. This section is borrowed heavily from [2]. If a € K, let the trace 
of a is Tr(a) =a +a, and the norm of a is N(a) = aa, so that |a|? = aw = N(a). 

If a, 6 € K, let a, 8] denote the set aZ+ GZ. Since K is an imaginary quadratic 


field, Ox = [1,w], where 
r-14V/D 


r 


where 
1 : D=2,3 (mod 4) 


2 : D=1 (mod 4) 
Thus, a € Ox if and only if Tr(a) and N(qa) are both in Z. The discriminant A of 
K is equal to (w —w)? = 4D/r?. 
Each integral principal ideal a of Ox has the form 


bal D 


=Z4+Z 
a + Da 


where a,b € Z,0 <a < WD, and 0 <b < 2a. For shorthand, we denote 
a= [a,b+ cw], (6.1) 


where a,b,c € Z,a > 0, and c > 0. We have cla, c|b, and ac|N(b + cw). In addition, 


if a = [a,b + cw], where a,b,c € Z, cla, clb, and ac|N(b + cw), then a is an ideal of 
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Ox. For a given ideal a, the value a is called the least positive rational integer in a, 
and we denote it by L(a). We say an ideal a is primitive if it is not divisible by any 
other ideal except by the trivial ideal (1). If an ideal is primitive, then c = 1. 

The following lemmas are attributed to Buchmann and Williams, and are given 


without proof. The proofs can be found in [2]. 


Lemma 6.1. (Buchmann, Williams) If a is any primitive ideal of Ox, then there 


exists some a € a such that a = [L(a),a] and | Tr(a)| < L(a). 
The following lemma tells us that the value of | Tr(a)] is unique. 


Lemma 6.2. (Buchmann, Williams) If a is an ideal of Ox, a = [L(a), a] = [L(a), 5], 
and | Tr(a)| < L(a), | Tr(8)| < L(a), then | Tr(a)| = | Tr(8)]. 


We call a a reduced ideal if a is primitive and there does not exist a @ € a such 
that |G] < L(a). The following theorems tell us when a is a reduced ideal and some 


properties of reduced ideals. 


Theorem 6.3. (Buchmann, Williams) If a is a primitive ideal of Ox anda = 


[L(a), a] with |Tr(a)| < L(a), then a is a reduced ideal if and only if |a| > L(a). 


Theorem 6.4. (Buchmann, Williams) If a is a reduced ideal of Ox, then L(a) < 
a AL: 


Theorem 6.5. (Buchmann, Williams) If a is a primitive ideal of Ox and L(a) < 
/|A|/2, then a is a reduced ideal of Ox. 


Lemma 6.6. (Buchmann, Williams) If a ~ 6, then there exists a € a such that 


Finally, the next theorem gives us that there are at most two reduced ideals in 


any given equivalence class of ideals. 
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Theorem 6.7. (Buchmann, Williams) Let a,6 be primitive ideals of Ox where a = 
[L(a),a] and b = [L(b6), 6] such that | Tr(a)| < L(a) and | Tr(b)| < L(b). Ifa~ 6, 
then L(a) = L(b6) and | Tr(a)| = | Tr()]. 


We will show in the section that each equivalence class of Ox contains a single 
reduced ideal. We will present Buchmann and Williams’s algorithm for recovering 


this reduced ideal. This is equivalent to Gauss’s reduction theory. 


6.2. IDEAL REDUCTION (FOUND IN [2]) 


This section will provide two algorithms to reduce primitive ideals. We note that if 
a = [L(a), a] is a primitive ideal of Ox, then the ideal 6 = [N(a)/L(a), —@] is also a 


primitive ideal. Therefore, 


This means that a ~ b. 


Algorithm 6.8. 1. Given a primitive ideal a = a, = [L(a),a] of Ox. Define 
Qo =rL(a) > 0 and Py =ra—VD € Z. Recall that the value r is the same as 


discussed in Section 6.1. 


2. Compute the following: 


G  =Ne(P/Q:), 

Peet = 0; =F, (6.2) 
P2,—D 

Qua = O° 


where Ne(7) is the nearest integer (i.e. |n — Ne(n)| < 5). This is unique unless 
” has fractional part exactly 5. 
3. We have 
[2 dete v2) 
Oa 5.3. 


r r 


Al 


is a reduced ideal of Og when 


a 2 Qs 


Proof. The proof can be found in Buchmann and Williams paper in [2]. 


The computations in Algorithm 6.8 can be quite cumbersome, so the following 
modification to the above provides a method for easier computations. Let T> = |Pol, 
to = Po/To, and Q_; = (P? — D)/Qo. Then we change Step 2 in the above algorithm 


as follows: 
Algorithm 6.9. 
s, = [T;/Q:| 
R; = remainder from dividing T; by Q;. 
Mi = Qi - 2R;. 
If M; > 0, then 
Tin = Ri, 
Ore. = Ora —s( Fett), 


tin = —hi, 


while if M; < 0, then 


S 
I 


ae = Mi, 


Qian = Q-1-5:(R +7) + Mi, 


tid iz t; . 


In this version, P; from (6.2) is P; = t,T7; for alli > 0. 
The following theorem gives us a upper bound on the number of steps necessary 
to reach a reduced ideal, ensuring that the algorithm gives us a reduced ideal every 


time. 
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Theorem 6.10. /f a is given as in Algorithm 6.8, then we have Q;4, > Q; for some 
iS 2+ [5 logs(3Qo/5y/|D))]. 


With this theorem, we now have an algorithm that will give us a reduced ideal 


every time. In the next section, we will discuss the key-exchange protocol. 


6.3 KEY EXCHANGE PROTOCOL 


We will now discuss the key exchange protocol. Suppose that Alice and Bob would 
like to exchange a key. Select a value of D such that |D| is large, approximately at 
least 102°. As discussed, select an ideal a in Ox,» where a is coprime to p. Both the 


value of D and the ideal a can be made public. 


1. Let Alice choose a random integer x. Alice computes a” ~ 6, where ~ represents 


ideal equivalence discussed in Section 6.1. Alice sends b to Bob. 
2. Bob selects a random integer y and computes aY = c. He sends c to Alice. 
3. Alice computes the reduced ideal f, ~ ¢”. 
4. Bob computes the reduced ideal fy ~ bY. 


Since 
fiw ce? ~ (a¥)? = (a")¥ ~ BY ~ fo, 

Alice and Bob both have the same reduced ideal of Ox. Therefore, by Theorem 
6.7, we have that L(f;) = L(f2). Now, if both f, = [L(fz),«1] and fz = [L(f2), #2], 
then | Tr(«1)| = | Tr(«2)|. Thus, Alice and Bob have the option to agree on whether 
L (fi) = L(fz) or | Tr(«1)| = | Tr(k2)| to be the secret. Otherwise, they could agree on 
certain parts of the above two options could be chosen to be the secret key. 

There is a cautionary tale here as since L(f,)|N(«1), L(f,) and Tr(k;) are not 
linearly independent, thus using parts of both could compromise the secret value of 


the key. 
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This key exchange system can be used as part of the public key crypto-system in 
a similar manner designed by El Gamal [11]. If Alice intends to send Bob a secure 
message, they would exchange keys as discussed above. Let L(f) be the key that has 
been agreed upon between the two parties. Again, we emphasize that x is only known 
to Alice, and y is only known to Bob. Let M = M,M.... My, be the plaintext message 
Alice wishes to send to Bob, where M; is a block corresponding to the bitlength of 


the key chosen. Then the cipher text sent from Alice to Bob is 


(M, or Ly) b), 


where 6 ~ a”, and M, is the first block of M and where the M, < L(f). Each 
subsequent block of M can be sent in a similar way, although for additional security, 
Alice should select a new value of x for each block in Step 3 of the Key Exchange 
Protocol. 

To decipher the message, Bob must determine the value of L(f), but since they 
have already exchanged keys, he has b ~ a® and his secret value y. Thus, he recovers 
the key by computing 


bY wa Wc Wf, 


thus allowing Bob to recover M,. 


6.4 SECURITY PROOF 


Security proofs for cryptosystems show that breaking the encryption via brute force 
is computationally equivalent to a difficult problem, such as factorization of a large 
number. We aim to show this version of the cryptosystem has similar difficulty as the 
discrete log problem, which is believed to be difficult. One of the biggest drawbacks 
to the described key exchange protocol is that the complexity is greater than El 
Gamal’s system [11], which is an asymmetric encryption algorithm based on the 


Diffie-Hellman key exchange. In addition, the bandwidth required is much greater. 
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For example, in order to use a 100 digit key, Alice and Bob must communicate 
200 digits of information. With the sacrifice of computational ease and increase of 
bandwidth, it is apparent the security of this system should be greater than [11] for 
increase in effort. Unfortunately, this crypto-system is not provably secure, but we 
will give evidence that this system has the foundations of a secure system. 

As stated before, the number of equivalence classes of ideal in Ox, is called the 
class number and denoted by hx». If @ and @ are two of these equivalence classes, 


then define the product @,@2 of these classes by 
6 = C16 = {e => abla — C,, bE Gy}. 


Since the ideals of Ox form an Abelian group G of order hy, we have that the ideals 
of Ox,» form an Abelian group with the structure of G/(p), which is consistent with 
Proposition 1.3, noting the fact that the identity of this group is the class of principal 
ideals. 


From page 389 of [20], we know that 
2|D 1/2 
-|DI? ( os ( 2 )) ; 
1 


hx > [Die 


hk < 


a) 


and for any ¢ > 0, 


for sufficiently large D. By assuming the Generalized Riemann Hypothesis (GRH), 


Littlewood [18] proved that 


m(1+ o(1)),/|D| 2(1 + o(1)),/|D] log log |D| 
<hk < . 
12e7 log log |D| 1 


Thus, we would expect the value of hx to be approximately the same magnitude 
as |D|'/?. Therefore, with the careful selection of prime p such that |D| is large and 
(p) = pp such that o(p) is small, we have hx, is large from Proposition 1.3. Therefore, 


the class group of ideals of Ox, will be large enough. 
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If Eve was attempting to attack Alice and Bob’s secure communication, she will 
have access to the value of D, p, and the ideals a,b, and c. She will win the game if 
she is able to recover either the secret value x or y. In order to do this is to figure out 
the value of f; or fz. One approach is to solve the discrete log problem in Clx /(p). 
In otherwords, given a reduced ideal a and reduced ideal b such that 6 ~ a”, recover 
the value x. Trying to find the value of x is quite a difficult problem. The best known 
method to compute hx is O(|A|!/4+*) on average and O(|A|!/>+*) at best [2]. 

Although the difficulty of this problem is not entirely known, Shanks proved in 
[22] that if there is an effective way to solve for x, then it will lead to an effective 
method to recover the factors of D. Therefore, this lets us believe that the difficulty 
of solving for x should be on a similar difficulty level as factoring a number. For more 


in depth analysis, see Section 4 of [2]. 
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CHAPTER 7 
OPEN QUESTIONS 


7.1 INFRASTRUCTURE 


In this section, we describe a brief outline of the infrastructure of the class group 
of real quadratic fields followed by our desire of developing a similar notion for fake 
real quadratics. The author recommends for people interested in reading more about 
this topic are encouraged to view Jacobson and Scheidler’s Structure Inside the Class 
Group of a Real Quadratic Field [16]. 

The infrastructure for real quadratic fields is the set of reduced principal ideals 
that forms a group-like structure. Specifically, let {a;}"_, be the set of reduced ideals 
in the class group of Q(VD), a real quadratic field. These ideals are equivalent giving 
us the following relationship: 

Ai+1 = (Wi) ai. 
The generators for the ideals a; and the values yw; are generated from intermediate 
steps computing the continued fractions expansion for VD. This fact is especially 
nice since otherwise finding these ideals would be a difficulty endeavor. Since the 
ideals a; are principal, we can write them as a; = (0;), and we have the following 


relationship regarding the generators 0; and 1: 
i-1 
6; = [J ve. 
k=1 
From this equality, we are able to say the distance between two ideals are 
O(di41, Oi) = log(4:41/8;) = log Yi. 


AT 


Although these ideals do not form a group, they have a cyclic “group-like” struc- 
ture. It should not be surprising that the reduced ideals generated from the continued 
fractions expansion will start to repeat as quadratic irrationals have periodic expan- 
sions. The best way to see this cyclic group-like structure is to place the ideals on a 


circle, as seen in Figure 7.1 below. 


6(n+1) 
= Rp 


Figure 7.1 The Infrastructure of the Class Group of Real Quadratic Fields 
Image Credit to Jacobson and Scheidler [16] 


Although the distance between any two ideals are not necessarily equal, the amaz- 
ing part is the circumference of this circle is the regulator Rp = log €p from Dirichlet’s 
class number formula. The infrastructure is a powerful method to represent the class 
group structure of a real quadratic field as it is easy to generate the reduced ideals 


and to compute the regulator Rp using the continued fractions expansion of VD. 
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Since we believe the class group structure of fake real quadratics and real quadratic 
fields are similar, we suspect an analogous infrastructure argument could exist. Al- 
though a concerted effort was made to develop a comparable system, we fell short of 
our goal. The first difficulty encountered was to find the reduced ideals for fake real 
quadratics. For real quadratic fields, the reduced ideals could be found using con- 
tinued fractions as discussed above. Another method to find these ideals employ the 
use of all binary quadratic forms of discriminant D and use Gauss’s reduction theory. 
In contrast, the only tools to find these ideals in the fake real quadratic order was 
to perform an exhaustive search. This proved to be a laborious task. Furthermore, 
it was never clear on whether all the reduced ideals were found as the number of 
ideals in each cycle can widely vary. During this search, the question of whether an 
equivalent continued fractions expansion was raised, and this idea will be discussed 
in the next section. 

Assuming that we had a complete set of reduced ideals, the next problem we 
encountered was the desired sum of distances between ideals to be equal to regulator 
Rp» = log, €p,». Untortunately, the sum of distances computed between the reduced 
ideals never corresponded to the desired value Rp, in any discernible pattern. Con- 
sidering this, it seemed apparent we needed a different approach to the development 
of our infrastructure. 

Nevertheless, the author is convinced that an infrastructure for the class group of 
fake real quadratic orders should exist. It seems dubious for the class group structures 
to be this similar yet fail to have an infrastructure counterpart. In addition, there 


was no contrary evidence produced to convince the author otherwise. 


7.2. CONTINUED FRACTIONS 


As stated in the previous section, continued fractions expansion provide incredible 


amounts of information for real quadratic fields Q(VD). For the infrastructure, it 
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yields the generators for the reduced principal ideals along with all the necessary parts 
to compute the regulator Rp. Even more interesting, the expansion can produce the 
fundamental unit ep for Q(VD). Thus, it would be desired to have an equivalent 
expansion for fake real quadratic orders. 

Both the infrastructure and the fundamental unit for Q(VD) rely on the periodic 
nature of the continued fractions expansion for quadratic irrationals. Unfortunately, 
the continued fractions algorithm is only defined for real numbers. Since fake real 
quadratrics are complex algebraic structures, we must use another method to compute 
such an expansion. 

The search for a continued fraction expansion counterpart led us to p-adics. The 
first major difficulty was to decide which process to use as many algorithms exist due 


to the variety of “floor” definitions for the p-adics. For real numbers, the floor of 


n € Ris the greatest integer part of n, denoted by |n]. In the p-adics, there is no 


clear equivalent definition for the floor. They were often some variation of the p-adic 
valuation of the number. 

We were specifically looking for an expansion that was periodic. The only expan- 
sion we encountered with this possibility was Justin Miller’s algorithm from his Ph.D. 
dissertation [19]. He proved that quadratic irrationals were periodic in Q2 and Qs 
and observed that many quadratic irrationals were periodic in Q, using his method. 
Unfortunately, his expansion did not provide a similar notion of reduced ideals or a 
fundamental unit for fake real quadratics. Recall from Chapter 2 that a fundamental 


unit for Op, should solve the Pell Equation 
x — Dy’ = p*, 


where k = o(p). As with most other p-adic continued fractions expansion, the nu- 


merator and denominators of the convergents solved the Diophantine equation 
x? — Dy? = zp*. 
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It was observed that some of these expansion did solve the desired Pell equation, but 
there seemed to be no discernible pattern on why this was true. After a while, it 
seemed apparent that it was sheer coincidence that the expansion happen to solve 
the Diophantine equation with z = 1. We attempted to isolate and understand if it 
was possible to modify the algorithm to force z = 1 everytime. Unfortunately, we fell 
short of our goal here as well as there was no strong evidence explaining why z = 1. 
We hope to inspire the reader to pursue the development of an equivalent continued 


fractions expansion for fake real quadratic orders. 


7.3 CLASS NUMBER PROBLEM 


It would be remiss if we did not mention an analogue to Gauss’s class number problem 


in terms of fake real quadratics. 


Conjecture 7.1. (O.) Let p be a fixed prime. Then there are infinitely many funda- 


mental discriminants D such that (2) = 1 such that hx,» = 1. 


It would be interesting to see if there was any logic argument why the element 
in the class group Clx representing the element p would not behave randomly. One 
of the largest hurdles for large |D| would be the difficulty of computing the order of 
p in the class group Clg. This knowledge is required to compute the class number 
hx». If there was an efficient method to compute the order, then one might be better 


equipped to produce and study the class numbers generated for large |D]. 
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APPENDIX A 


FUNDAMENTAL UNIT METHOD 1 SAGE CODE 


The following code uses SAGE [24] to find the fudamental unit for a given p prime and 
fundamental discriminant D < 0. The program follows Method 1 uses the following 


steps: 
1. Computes the class number h(D) for Q(VD). 
2. Determines all divisors of h(D). 


3. Iterates through all the divisors of h(D) starting from the smallest divisor and 


determines if p* is represented by the binary quadratic form x? — Dy?. 
The smallest divisor & such that there exists a (x, y) satisfying the Pell equation 
2? — Dy? = pk 
gives the fundamental unit x + yVD. 


import csv 
import numpy 
import pylab as p 
import matplotlib 


import math 


def class_number_frgf_precision(p, D, prec = 2): 


‘**Program searches through all possible divisors of the class 
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number 

Determines whether there is a solution to the Pell Equation 

x°2 - D*xy~2 = p*k, where k is the order of p in the class group 
\n 

Usage: \n 

Dy: D0: Nn 


p: fixed prime \n 


\n 
Outputs: 
(x, y, k) 


where x°2 - D*y~2 = p°k \n ’’’ 
# Checks to see if p is prime 
if is_prime(p) == False: 
return "ERROR> " + str(p) + " is not a prime number." 
# Checks to see if D is a negative value 
elif D >= 0: 
return "ERROR> D should be < 0." 
# Checks to see if D is a square modulo p 
elif legendre symbol(D, p) != 1: 
return "ERROR> " + str(D) + " is not a quadratic residue 
modulo " + str(p) + "." 
elif is_prime(-D) != True or (-D%/4) != 3: 
return "ERROR> " + str(D) + " is not a prime or -D not 
\equiv 3 (mod 4)." 


# Creation of the Number Field \Q(\sqrt(D)) and its class group 


~ 
I 


QuadraticField(D) 


h = K.class_number() 
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# p O_K = \mathfrak{p} \bar{\mathfrak{p}}, let A = \mathfrak{p} 
A = K.factor(p) [0] [0] 
# value holds the value for the order of \mathfrak{p} in Class 
# Group of K 
value = 0 
# creation of PARI number field 
bnf = A.number_field().pari_bnf() 
# goes through every possible divisor of the class number 
for k in h.divisors(): 
# temp holds the possible ideal, checks whether to see if it 
# is principal 
temp = A*x*k 
# if temp is principal, then break, otherwise, check next 
# divisor 
pari_ideal_challenge = bnf.bnfisprincipal(temp.pari_hnf(), prec) 
if sum(list(pari_ideal_challenge)) == 
value =k 
break 
# Return D, p, h_{K,p}, h_K, ord(p) in Cl(K), fundamental 
# unit 


return D, p, h/value, h, value, (A**value).gens_reduced() [0] 
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APPENDIX B 
FUNDAMENTAL UNIT METHOD 2 SAGE CODE 


The following code uses SAGE [24] to determine the fundamental unit for the fake 
real quadratic order generated by prime p and the fundamental discriminant D < 0. 
The SAGE code listed here uses the method described in Section 2.2, where the order 
of the class group of the fake real quadratic is determined by binary quadratic forms 
and through matrix reduction delivers the fundamental unit. 

The function binary_quadratic_order(D,p) uses the built in functionality of 
SAGE to determine the order of the prime fractional ideal p where (p) = pp in Clx, 
the class group of the imaginary quadratic field K = Q(VD). 

The function square_root_mod(n,p) computes the square root of r modulo p, or 
solutions to 


z?=r (mod p) 


using the Tonelli-Shanks algorithm discusses in Section 2.4. 

The function quadratic_nonresidue(p) scans the set {0,1,...,p — 1}, starting 
from 0 increments by 1, stopping when it has found a quadratic non-residue. This 
function is necessary for the Tonelli-Shanks algorithm. Returns a quadratic non- 
residue. 

During the process of computing the order of the ideal p, we need to check whether 
or not each power of the given binary quadratic form is equivalent to the principal 
binary quadratic field. If the D is not either 0 or 1 (mod 4), then the principal 
binary quadratic form has not been implemented. 


The following function reduces a given binary quadratic form Q = (a,b,c) with 
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discriminant D so that it satisifies |b] <a <c. It is programmed to do the following: 


Given a binary quadratic form Q = (a,b,c), we look at it as a matrix 


a 06/2 
Q —v 
b/2 ¢ 
Then find the matrix M such that 
[4 Bl 
M'QM = 
BQ 5G 


where (A, B, C) represents the reduced principal binary quadratic form with discrim- 
inant D. 
The function delta_value(b,c,D) is used in conjuction with the previous func- 


tion BinaryQF_reduction_matrix(Q). The transformation matrix has the form 


0 -1 
1 Oo 
where 6 € Z is the value that satisfies 
| —b+ 2cd| <c, 


where b and c are from the binary quadratic form (a, b, c) in which it is being reduced. 
This function will find the 6 value necessary for the step of reduction that will reduce 


the binary quadratic form. 


def binary_quadratic_order(D, p): 
???This program uses binary quadratic forms 
with the built-in functionality of SAGE to 
determine the order of \mathfrak{p} in the 
class group C1(K) where K = Q(\sqrt{D}). 
Also will return the fundamental unit for 


the fake real quadratic field 0_{K,p} where 
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K is the imaginary quadratic field defined 
the same as above.\n 
\n 
\n 
D: the D value for Q(\sqrt{D}) \n 
p: the prime that creates the fake real quadratic’’’ 
# Check whether D is a square modulo p 
if legendre_symbol(D,p) != 1: 
return "ERROR> " + str(D) + " is not a square modulo " + str(p) 
# Compute the binary quadratic form with disc D 


# with leading coefficient p. 


+ 


Quadratic Form (a,b,c) = (p,b,c) 


+ 


leading coefficient 

aaa 

# computing b and c value 
square_root_values = square_root_mod(D, p) 


c = (int(square_root_values[0])**2 - D)/(4*a) 


if int(c) == 
b = int(square_root_values[0]) 
else: 
b = int(square_root_values[1]) 
c = (b**2 - D)/(4*a) 


# creation of the binary quadratic form of disc D 
# with leading coefficient p 

Q = BinaryQF([a,b,c]) 

# creation of principal binary quadratic form of 


# disc D 
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P = BinaryQF_principal (D) 
# Checks to make sure principal QF is sane 
if type(P) == str: 
return "ERROR> Not Implemented Yet." 
# variable to keep track of order 
order = 1 
# temp variable to hold the current binary 
# QF in question 
temp = Q 
# loop until Q is the principal form 
while temp.is_equivalent(P) == False: 
temp *= Q 
order += 1 
# compute the reduction matrix and fundamental unit 
data = BinaryQF_reduction_matrix (temp) 
# returns the fundamental unit, order of \mathfrak{p} 
# in class group K, binary quadratic form, and 
# reduction matrix 


return data[2], order, temp, datal[1] 


def square_root_mod(n, p): 
??? This program computes the square root of r modulo p 
and returns the two solution. Uses the Tonelli-Shanks 
algorithm.’’’ 
# checks that r is a square modulo p 
if legendre_symbol(n, p) != 1: 
return "ERROR> " + str(n) + " is not a square modulo " + str(p) 


# p-1 = Q*27S 
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wn 
I 


(p-1).trailing zero_bits() 


pe) 
I 


int ((p-1) /2**S) 
# Retrieve a quadratic non-residue modulo p 
Z = quadratic_nonresidue(p) 


# Define the following values for R, t, and M 


R = mod(n**((Qt+1)/2), p) 
t = mod(n**Q, p) 
M=85 


# Set value of c 
c = mod(z**Q, p) 
# checks the first step of the loop 
if t == 
return R, p-R 
# iterate over the following loop 
while t != 1: 
# find lowest i, O<i<M, such that t7(27i) \equiv 1 
# mod p 
i=i 
end_condition = False 
while end_condition == True: 
if mod(t**(2**i), p) != 1: 
i+= 1 
else: 
end_condition = True 
b = mod(c**(2**(M-i-1)), p) 
# Set the following congruences 


R = mod(R*b, p) 
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t = mod(t*(b**2), p) 
c = mod(b**2, p) 
M=i 


return R, p-R 


def quadratic_nonresidue(p): 
??? This program finds a random element in {0,1,...,p-1} 
that is a non-residue and returns it.’’’ 
# Starts at the beginning of the set and searches for a 
# quadratic non-residue 
for i in xrange(p-1): 
# checks to see if a quadratic non-residue 
if legendre symbol(i,p) == -1: 
# returns quadratic non-residue 


return i 


def BinaryQF_principal(D): 
>??? Returns the reduced principal binary quadratic 
forms with discriminant D.’’’ 
if D%4 == 0: 
return BinaryQF([1,0,-D/4]) 
elif D/4 == 
return BinaryQF([1,1,-(D-1)/4]) 
else: 


return "ERROR> Not Implemented Yet." 


def BinaryQF_reduction_matrix(Q): 
?? >This program attempts to reduce a binary quadratic 


form Q = (a,b,c). While it reduces, it keeps track of 
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the reduction matrices used and produces the entire 
matrix at the end.’’’ 
# Converts from SAGE BinaryQF type to list 
L = list(Q) 
# Creation of Binary Quadratic Field 
K = QuadraticField(Q.discriminant(), ’a’) 
# stores all the ideal necessary 
reduction BQF = [] 
reduction_BQF.append((-L[1]+K(’a’))/(2*L[0] )) 
# list delta holds all delta values (matrix entry 2,2) 
# used to transform matrix 
delta = [] 
# Loops to see if L is reduced (without using built 
# in functionality 
# loop while binary quadratic form is not reduced 
while (abs(L[1]) <= L[0] < L[2]) == False: 
# find the new b and new c value along with delta 
temp = delta_value(L[1], L[2], Q.discriminant() ) 
# append the compute delta value in temp into list 
delta. append (temp [0] ) 


# save the new binary quadratic form into list 


L{O] = L[2] 
L[1] = temp[1] 
L[2] = temp[2] 


# adds the new binary quadratic form to 
# reduction_BQF list 


reduction_BQF.append((-L[1]+K(’a’))/(2*L[0])) 
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# creation of the identity 2x2 matrix 
M = Matrix.identity(2) 
# for each d in delta value 
for d in delta: 
# create the transformation matrix for that 
# step of reduction 
temp = Matrix([[0,-1],[1,d]]) 
# multiply it to the product of all these 
# transformation matrices 
M *= temp 
# Computes the fundamental unit 
fund_unit = 1 
for j in xrange(len(reduction_BQF)-1): 
fund_unit *= reduction_BQF[j] 
fund_unit = fund_unit**(-1) 
# return reduction transformation matrix, its inverse, 
# multiplied by -1, 
# the list of BQF involved with reduction 


return M, -M.inverse(), fund_unit 


def delta_value(b, c, D): 
>?? Compute the valid delta value used to transform 
matrix to reduce a binary quadratic form.’’’ 
# start at the smallest d (i.e. delta) value 
d=0 
# starting value of the new b 
new_b = -b + 2x*cx*d 


# counter to decide which value of d to try 
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# allow alternation between plus or minus d 
counter = 0 
while (abs(new_b) <= c) == False: 
# when counter is even, increase the 
# magnitude of delta by +1 
# find the new b value and recheck if 
# it works 
if counter/2 == 
d = abs(d) + 1 
counter += 1 
new_b = -b + 2*cx*d 
# when counter is odd, check the 
# negative form of delta, find the 
# new b value and recheck if it works 
else: 
d = -abs(d) 
counter += 1 
new_b = -b + 2x*cx*d 
# once a valid new b value has been found 
# compute the new c value 
new_c = (D - new_b**2)/(-4*c) 
# return the delta value, new b, and new c 


return d, new_b, new_c 
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APPENDIX C 


C-L/HooLey/CLASs NUMBER SCANNER 


We attempted to investigate an analogue to the Hooley conjecture which states that 


S> h(D) ~ X/8. 


D<x 


We fell short of our goal for showing an analogous statement, but we list here the 
code developed in the attempt to generate data and trendlines. 

The code listed here uses SAGE [24] to perform a handful of tasks that provide 
data for fake real quadratic orders. The function neg disc_range generates a list of 
negative fundamental discriminants in the range |-D, -2), unless a different value for 
the lower bound is specified other than —2. 

The function class_number_prec_scanner take a given list of negative funda- 
mental discriminants and primes, and for each valid combination of p and D (i.e. 
(2) = 1), it computes the class number for the fake real quadratic order Ox, where 
K = Q(vD). It will record the frequency of each instance of a class number for each 
prime and write it out to a file. 

The function class_number_one_scanner operates similarly to the 
class_number_prec_scanner, except checks only to see if the class number for the 
fake real quadratic order is one. If the class number is one, then it will write it to the 
file. 

For the function fake_real_hooley, it takes a list of primes and functional dis- 


criminants and for valid combinations of p and D, computes partial sums for 


» h(D,p). 
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This function aims to see if there is a visual analogue to the Hooley conjecture for 
fake real quadratic orders. It will plot the data for a specified number of partial sums 
on a graph. 

The function class_number_formula is used to compute the class number using 
the class number fomrula rather than the brute force methods listed in Method 1 
and Method 2. Unfortunately, since there is not an efficient way to compute the 
fundamental unit, it still requires some data to be computed using Method 1. 

The function class_number_formula_scanner uses the function 
class_number formula function. Given a list of primes and fundamental discrimi- 
nants, the function will produce a file that contains all valid combinations of p and 
D and the class number for the fake real quadratic order that is produced by them. 


The goal is the data can be post-processed in order to identify additional patterns. 


def neg disc_range(D, lower_bound = -2): 
??? Returns a list that contains all fundamental negative 
discriminants in the range [-D, lower_bound). ’’’ 
if D <= -lower_bound: 
print "ERROR> Upper bound must be a postive value greater 
than", -lower_bound 
return 
# Create list that will hold all negative fundamental discriminants 
disc_list = [0] * D 
# atomic counter to keep track of which entry of the disc_list to 
save valid values 
counter = 0 
# iterate through range [-D, lower_bound). If fundamental 
discriminant, place into 


# disc_list[counter]. 


68 


for i in xrange(-D, lower_bound): 
if is fundamental discriminant(i) == True: 
disc_list[counter] = i 
counter += 1 
# Returns disc_list, with only valid entries, with smallest to 
largest negative disc 


return disc_list[counter-1::-1] 


def class_number_prec_scanner(nth_prime_end, upper_bound_disc, 
filename_raw, nth_prime_start = 1, lower_bound_disc = -2, print_out 
= False, class_number_upperbound = 10**4, prec = 2): 

# Creates the list of primes based on the inputs 

P = primes_first_n(nth_prime_end) [nth_prime_start:] 

# Creates the list of negative fundamental discriminants based on 
the inputs 

# D = neg disc_range(upper_bound_disc, lower_bound_disc) 

D = xrange(-upper_bound_disc, lower_bound_disc) 

# Creation of the file, in write mode 

filename = str(filename raw) + ".txt" 

open_file = open(filename, ’w’) 

# Creation of the csv writer for the given filename 

spamwriter = csv.writer(open_ file) 

spamwriter.writerow(["Primes number " + str(nth_prime start) + 
"to " + str(nth_prime_end) + ", Discriminants in range " + 
str(lower_bound_disc-1) + " through " + str(-upper_bound_disc)]) 

# Scan through each prime, range through each disc, and print to 


file class number 
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for p in P: 
# writes the current prime out to file 
spamwriter.writerow([str(p)]) 
# array keeps track of the number of each class number for a 
given prime 
class_number_array = numpy.zeros(class_number_upperbound) 


# counter keeps track of total number of frqf for a given 


prime 
counter = 0 
# Goes through each negative disc in given range 
for d in D: 
# retrieves the class number h {K,p} 
data = class_number frqf_ precision(p, d, prec = 2) 
# If there is an error is the prime/discriminant combo, 
continue 
if type(data) == str: 
continue 
# Else, print out to screen or file, pending on command 
options 
else: 
# counts each negative disc for a given prime 
counter += 1 
if print_out == True: 
spamwriter.writerow(["disc: " + str(d) + " 
, h_{K,p} = " + str(int(data[0])), data[1], data[2]]) 


# For each class number, add one to the counter 


class _number_array[int(data[0])] += 1 
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# For each non-zero entry, print to file 
for i in (class_number_array.nonzero()) [0]: 
# Print to file each class number and its number of 
occurences 
spamwriter.writerow(["Class number: " + str(i) + ", 
Number of Occurences: " + str(int(class_number_array[i]))]) 
spamwriter.writerow(["Total FRQF: " + str(counter)]) 
# Close file 
open_file.close() 


return "Finished!" 


def class_number_one_scanner(nth_prime_end, upper_bound_disc, 
filename_raw, nth_prime_start = 1, lower_bound_disc = -2, 
print_out = False, class_number_upperbound = 10**4): 

# Creates the list of primes based on the inputs 

P = primes_first_n(nth_prime_end) [nth_prime_start:] 

# Creates the list of negative fundamental discriminants based 
on the inputs 

D = neg disc_range(upper_bound_disc, lower_bound_disc) 

# Creation of the file, in write mode 

filename = str(filename raw) + ".txt" 

open_file = open(filename, ’w’) 

# Creation of the csv writer for the given filename 

spamwriter = csv.writer(open_ file) 

spamwriter.writerow(["Primes number " + str(nth_prime start) + 
"to " + str(nth_prime_end) + ", Discriminants in range " + 


str(lower_bound_disc-1) + " through " + str(-upper_bound_disc)]) 
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# Scan through each prime, range through each disc, and print to 
file class number 
for p in P: 
# writes the current prime out to file 
spamwriter.writerow([str(p)]) 
# creates two counters. one for class number one, and one 
for total number of fraf 
counter_one = 0 
counter _frqf = 0 
# Goes through each negative disc in given range 
for d in D: 
# retrieves the class number h {K,p} 
data = class_number fraf(p, d) 


# If there is an error is the prime/discriminant combo, 


continue 
if type(data) == str: 
continue 
# Else, print out to screen or file, pending on command 
options 
else: 
# Counts each valid fraf 
counter _frqf += 1 
if print_out == True: 
spamwriter.writerow(["disc: "+ str(d) +", 
h_{K,p} = " + str(int(data[0]))]) 


# If class number one, add to counter. Otherwise, 


go to next disc 


(2 


if int(data[0]) == 1: 
counter_one += 1 
else: 
continue 
# Print to file each class number and its number of occurences 
spamwriter.writerow(["Total class number 1: " + 
str(counter_one) + ", Total FRQF: " + str(counter_rfqf)]) 
# Close file 
open_file.close() 


return "Finished!" 


def class_number_prec_scanner(nth_prime_end, upper_bound_disc, 
filename_raw, nth_prime_start = 1, lower_bound_disc = -2, 
print_out = False, class_number_upperbound = 10**4, prec = 2): 

# Creates the list of primes based on the inputs 

P = primes_first_n(nth_prime_end) [nth_prime_start:] 

# Creates the list of negative fundamental discriminants based on 
the inputs 

# D = neg disc_range(upper_bound_disc, lower_bound_disc) 

D = xrange(-upper_bound_disc, lower_bound_disc) 

# Creation of the file, in write mode 

filename = str(filename raw) + ".txt" 

open_file = open(filename, ’w’) 

# Creation of the csv writer for the given filename 

spamwriter = csv.writer(open_ file) 

spamwriter.writerow(["Primes number " + str(nth_prime_ start) + 


"to " + str(nth_prime_end) + ", Discriminants in range " 
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+ st 


# Sc 


r(lower_bound_disc-1) + " through " + str(-upper_bound_disc)]) 


an through each prime, range through each disc, and print to 


file class number 


for 


a given 


prime 


continue 


options 


p in P: 

# writes the current prime out to file 
spamwriter.writerow([str(p)]) 

# array keeps track of the number of each class number for 
prime 

class_number_array = numpy.zeros(class_number_upperbound) 


# counter keeps track of total number of frqf for a given 


counter = 0 
# Goes through each negative disc in given range 
for d in D: 
# retrieves the class number h {K,p} 
data = class_number frgf_precision(p, d, prec = 2) 


# If there is an error is the prime/discriminant combo, 


if type(data) == str: 
continue 


# Else, print out to screen or file, pending on command 


else: 
# counts each negative disc for a given prime 
counter += 1 
if print_out == True: 


spamwriter.writerow(["disc: "+ str(d) +", 
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h_{K,p} = " + str(int(datal0])), data[1], data[2]]) 
# For each class number, add one to the counter 
class _number_array[int(data[0])] += 1 
# For each non-zero entry, print to file 
for i in (class_number_array.nonzero()) [0]: 
# Print to file each class number and its number of 
occurences 
spamwriter.writerow(["Class number: " + str(i) + ", 
Number of Occurences: " + str(int(class_number_array[i]))]) 
spamwriter.writerow(["Total FRQF: " + str(counter)]) 
# Close file 
open_file.close() 


return "Finished!" 


def fake real_hooley(nth_prime_end, upper_bound_disc, filename raw, 
nth_prime_ start = 1, lower_bound_disc = -2, class_number_upperbound 
= 10**4, prec = 2): 

# Creates the list of primes based on the inputs 

P = primes _first_n(nth_prime_end) [nth_prime_start:] 

# Creates the list of negative fundamental discriminants based 
on the inputs 

# D = neg disc_range(upper_bound_disc, lower_bound_disc) 

D = xrange(-upper_bound_disc, lower_bound_disc) 

# Creation of the file, in write mode 

filename = str(filename raw) + ".txt" 

# Create the filename for the picture 


filename pic = str(filename_raw) + "_hooley.png" 
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# Open text file name is write mode 

open_file = open(filename, ’w’) 

# Creation of the csv writer for the given filename 

spamwriter = csv.writer(open_ file) 

spamwriter.writerow(["Primes number " + str(nth_prime_ start) 
+" to " + str(nth_prime_end) + ", Discriminants in range " + 
str(lower_bound_disc-1) + " through " + str(-upper_bound_disc)]) 

# Creation of the x-axis for the plot 

X = [i for i in xrange(upper_bound_disc)] 

# Creation of the primary plot 

fig = p.figure(figsize = (20, 15), dpi = 500) 

# Creation of the actual subplot on the graph 

ax = fig.add_subplot(1, 1, 1) 

# x-axis label 

ax.set_xlabel("Disc < " + str(upper_bound_disc)) 

# y-axis label 

ax.set_ylabel("H(p, X)") 

# Set plot Title 

ax.set_title("Hooley Data for Fake Real") 

# Specify the colors for plot 

colores: = [Pb 8a 4 “at oe. tm a kes awe] 

# Specify the two markers 

markers = [’o0’, ’x’] 

# Color counter 

color_counter = -1 

# marker counter 


marker_counter = 0 
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# prime array to hold labels 
prime_label_array = [0] * len(P) 
for i in len(P): 
prime_label_arrayli] = [’subplot_’ + str(P[i]), str(P[il]), 
>placeholder’ ] 
# Holds the interval for each sample 
interval = int(len(D)*.05) 
# Scan through each prime, range through each disc, and print to 
file class number 
for p in P: 
# if loop to advance the counter 
if color_counter == 
color_counter = 0 
markers = 1 
else: 
color_counter += 1 
# array keeps track of the number of each class number for 
a given prime 
class_number_array = numpy.zeros(class_number_upperbound) 
# counter keeps track of total number of frqf for a given 
prime 
counter = 0 
# Goes through each negative disc in given range 
for j in len(D): 
# retrieves the class number h_ {K,p} 
data = class_number frgf_precision(p, D[j], prec = 2) 


# If there is an error is the prime/discriminant combo, 


ws 


continue 
if type(data) == str: 
continue 
# Else, print out to screen or file, pending on command 
options 
else: 
# counts each negative disc for a given prime 
counter += 1 
# For each class number, add one to the counter 
class _number_array[int(data[0])] += 1 
if j % interval == 
sum = 0 
for i in (class_number_array.nonzero()) [0]: 
sum += i*class_number_array[i] 
# For each non-zero entry, print to file 


0 


n 
= 
B 

Ul 


for k in (class_number_array.nonzero()) [0]: 
sum += k*class_number_array[k] 
# Close file 
open_file.close() 


return "Finished!" 


def class_number_formula_data(p, D): 
# Produce data for seeing the class number is possible 
data = class_number_ frgf_precision(p, D) 
if type(data) == str: 


return "ERROR> NOT A VALID p, D COMBINATION" 
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log abs fund_unit = log(abs(data[5])) 

log norm fund_unit = log(norm(datal[5])) 

return D, p, data[2], datal[3], data[4], data[5], 
RR(log_abs_fund_unit), RR(data[4]/log abs_fund_unit), 


RR(log_ norm_fund_unit), RR(data[4]/log norm _fund_unit) 


def class_number_formula_scanner(D, number_of_primes): 

# Creation of filename 

filename = "disc" + str(D) + "_" + str(mumber_of_primes) 
+ "primes.txt" 

# Open text file name is write mode 

open_file = open(filename, ’w’) 

# Creation of the csv writer for the given filename 


spamwriter = csv.writer(open_ file) 


spamwriter.writerow(["disc","prime", "h(disc,p)", "h(disc)", 
"order", "fundamental unit", "log of abs value fund unit", 
"order | by log abs fund unit", "log of norm fund unit", 


"order | log norm fund unit"]) 
# list of primes 
P = primes_first_n(number_of_primes) [1:] 
# range through all the possible primes 
for p in P: 
data = class_number_formula_data(p, D) 
if type(data) == str: 
continue 
else: 


spamwriter.writerow([data[0], data[1], data[2], 
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data[3], data[4], data[5], data[6], data[7], data[8], data[9]]) 
# Close file 
open_file.close() 


return 
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APPENDIX D 
ANKENY-ARTIN-CHOWLA CONJECTURE ADDITIONAL 


COUNTEREXAMPLES 


We list additional counterexamples to the AAC Conjecture. For each given p and 
D, we give the fundamental unit that violates the AAC conjecture for the fake real 
quadratic field Ox, where K = Q(VD). The counterexamples were found by Henri 
Cohen, and the fundamental units were generated by the SAGE program found in 


Appendix A. 


p=31, D=-3 
€=2—3/-3 


p = 93, D = —738319 

€ = 794097868001499134083892110353483885757836930922670268485 7229398077229 
34259895179307031589007257860127574031936702919153184117140630937117749951 
393427431337623376249273945672801840382176843642006903356482597486 10289198 
71108429902360910731942927918190316706882412983275292064293759364248578971 
956288334667609069379909389778655618986043943868270772937239244045 13148623 
264318494549 10061241143121726415949129385146414217048533116230046112424960 
646354225 14636930397574223586126381067371762760921933734206914296692381718 
563407815957060615107— 270249065378 1764407198427 74577289426 748384222521987 
9496673539223937311529964357986439659455673 1684745525404221487499258028417 
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40613268315952626703991291015202518174542101161570447436168570402169147416 
02805501366213149457964886120024931978807734500906095291121160101638673071 
64405266696606327443420089631986711132458624589661152734425879330384 144477 
8032517657169504737125239093801260856748273373376791106975709 1624698990034 
070589612990950272298981 1764823103648 1384992799120588677831209145614411471 
834338668461521925624819755949 14447854 - /—738319 


p = 281, D = —1071739 

2 = (656049221836308141880301298773639360672862991535533674782067 145487738 
7399965 10330164217421936583389765000426207717832982022695548437 16465070278 
00258283299677721907814012242046 127 +1712305725005216325090687959213971113 
559543855641696688473794947423 12 161486349900453427747272921256127830454884 
14597146986198515447187685536157914412847245665859 12538782392485 

- /—1071739) /2 


p = 859, D= —3 


_ 18 +33-¥3 
2S 


p = 859, D = —23 
€ = 25174 + 69 - /—23 


p = 859, D= —311 


€ = 1862352165906915108247532158 + 409821377792071204294324155 - V—311 


p = 859, D = —664019 
€ = 2715865657163776661969863350960805 704931689 149160409811094660190991644 
961050037904970736226739241574520382563564925487 7526823 1060960384424777569 
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00188689141850204949770980041206371716580597726461923710673465619512626012 
00891064941054633959899498078993114370122334195307491255675192035443342866 
7595530415072299 142362900796 1444004187324701227103868388462735959661401242 
52604108776070654158471209101645537285705224153319389256425198686008428783 
41780032 —5017091603064165709326542003129091509578925424656226653896532679 
70260009550646031766192364654852662551703430253040249829239450871739427419 
267286967 11170043146894121716563556197166155703499336613446016209895711991 
97565677131406689375766243729219051594124974055655424573836426931099953 760 
443740773070747272565198288606068348605268548 13486 708456129403718303002743 
339077837 7067089469 7009152672166271873742931761639400782258756655926 197725 


517034565 - \/—664019 
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